Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: UC/wUrQ0fS+6HM4e1/xHRB4qsX0ewgjnO9JC8K+Aym0=
Subject key identifier: A4:61:49:3C:E6:27:F4:62:1B:40:D2:EC:7D:28:7C:AF:70:F7:A8:85
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 019D2A7275379EAB69CB608C75E430A5B7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 0BD4
Signing time: Thu 26 Mar 2026 14:00:37 +0000
Manifest this update: Thu 26 Mar 2026 14:00:37 +0000
Manifest next update: Fri 27 Mar 2026 14:00:37 +0000
Files and hashes: 1: WKluDkXLbOUe3fiyMU_sfUku4Zk.roa (hash: g8pqi7RglCM3KJkQHe8MWM6i4Vof+uHKV1U9w7O5DtE=)
2: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: F3MLhgYCFuTzXxIKJPFuv8WtkJGssctKDLH8BHoMt1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:75:37:9e:ab:69:cb:60:8c:75:e4:30:a5:b7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Mar 26 14:00:37 2026 GMT
Not After : Mar 27 14:00:37 2026 GMT
Subject: CN=a461493ce627f4621b40d2ec7d287caf70f7a885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:cf:40:56:aa:2d:41:ed:5c:5e:58:e9:a1:
2e:51:48:ab:aa:9f:7c:88:9c:e5:5d:e2:f0:bb:56:
2a:3d:1f:e4:9b:aa:74:db:0b:03:81:65:01:a5:4a:
41:a3:c7:be:d8:a8:5a:f7:02:35:1b:bd:5b:1a:92:
51:42:b0:2b:66:13:e5:f0:d1:3b:63:07:12:95:25:
04:d9:91:97:0e:1d:c1:2e:cc:5f:45:c8:ab:77:c7:
6c:31:96:52:15:e7:bc:19:d0:0c:b1:ff:2c:39:cc:
1f:f4:6a:fc:1d:b9:a6:a6:ad:b5:48:86:e8:00:4a:
9a:92:17:a9:2f:c9:a0:d1:59:e4:63:cf:12:d2:13:
74:93:cd:73:e4:be:14:cc:4b:9e:bc:da:9a:fb:04:
b1:db:06:7b:f9:9c:6a:f5:ee:2f:40:7d:d7:8c:fb:
82:9f:5e:fa:bf:f3:10:35:5f:3e:72:0d:ab:26:ff:
ee:1d:99:8c:25:a2:f2:d4:2a:96:fe:36:94:36:f7:
a8:63:c2:50:b7:4a:40:ed:5c:d4:88:f8:4a:ab:e3:
88:ff:cd:89:a9:65:b9:9c:1c:91:62:d8:4b:40:35:
88:a5:2c:a7:7e:a8:cc:6d:e6:a7:f9:36:0b:ce:76:
80:0f:9f:d5:2e:8a:04:2c:d7:f9:67:96:84:e7:2b:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:49:3C:E6:27:F4:62:1B:40:D2:EC:7D:28:7C:AF:70:F7:A8:85
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9c:07:6a:bd:f8:17:d2:a8:0b:ed:89:29:f8:8f:ef:15:e7:
6e:ef:7f:47:62:20:bc:02:77:db:b1:c0:02:b1:e0:05:46:58:
a4:33:97:84:d4:f0:10:9e:d2:58:bf:fd:82:77:31:37:b4:c9:
a1:6d:33:87:be:35:57:aa:6e:62:80:b4:71:ab:f1:d1:f5:a9:
be:5a:b1:69:4a:05:f1:7a:64:be:71:5f:f0:c0:c6:56:e6:25:
79:ce:d7:58:64:34:f0:05:ee:63:c2:9c:5a:0b:7b:03:03:49:
82:93:b2:61:25:5d:af:f7:bb:05:3f:a4:01:8f:cd:a1:ef:d1:
43:ac:27:15:d6:9c:a6:58:d2:c7:21:a1:05:8d:83:7c:30:60:
00:f6:d5:5b:24:04:3e:4b:25:a3:11:c3:a2:d8:9a:42:e3:03:
e8:39:1e:3c:ad:4d:0f:5b:78:7c:0d:26:11:46:5c:4f:cb:f2:
22:9b:93:4a:ed:01:8a:06:84:14:ff:48:86:62:d2:5c:d2:3a:
93:36:aa:de:55:57:5b:5a:d0:7f:89:37:d8:40:f5:e3:ca:b3:
82:26:4f:e0:ef:f5:d9:ef:8b:1c:4f:49:b7:69:21:2d:53:bc:
06:33:95:c0:34:2a:c2:1c:29:eb:37:66:72:91:8d:d1:26:c2:
81:c7:5d:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcnU3nqtpy2CMdeQwpbeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzNiZDI0ZmQ4MzA4ODZiZmEyZDI5NjE0MTZkMjE4NWRl
MzM3NzIwHhcNMjYwMzI2MTQwMDM3WhcNMjYwMzI3MTQwMDM3WjAzMTEwLwYDVQQD
EyhhNDYxNDkzY2U2MjdmNDYyMWI0MGQyZWM3ZDI4N2NhZjcwZjdhODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNnPQFaqLUHtXF5Y6aEuUUirqp98
iJzlXeLwu1YqPR/km6p02wsDgWUBpUpBo8e+2Kha9wI1G71bGpJRQrArZhPl8NE7
YwcSlSUE2ZGXDh3BLsxfRcird8dsMZZSFee8GdAMsf8sOcwf9Gr8Hbmmpq21SIbo
AEqakhepL8mg0VnkY88S0hN0k81z5L4UzEuevNqa+wSx2wZ7+Zxq9e4vQH3XjPuC
n176v/MQNV8+cg2rJv/uHZmMJaLy1CqW/jaUNveoY8JQt0pA7VzUiPhKq+OI/82J
qWW5nByRYthLQDWIpSynfqjMbean+TYLznaAD5/VLooELNf5Z5aE5ytqywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRhSTzmJ/RiG0DS7H0ofK9w96iFMB8GA1UdIwQY
MBaAFGxzvST9gwiGv6LSlhQW0hhd4zdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYt
NzNhMTU3YTJiOTlmLzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYtNzNhMTU3YTJiOTlm
LzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpwHar34
F9KoC+2JKfiP7xXnbu9/R2IgvAJ327HAArHgBUZYpDOXhNTwEJ7SWL/9gncxN7TJ
oW0zh741V6puYoC0cavx0fWpvlqxaUoF8XpkvnFf8MDGVuYlec7XWGQ08AXuY8Kc
Wgt7AwNJgpOyYSVdr/e7BT+kAY/Noe/RQ6wnFdacpljSxyGhBY2DfDBgAPbVWyQE
PksloxHDotiaQuMD6DkePK1ND1t4fA0mEUZcT8vyIpuTSu0BigaEFP9IhmLSXNI6
kzaq3lVXW1rQf4k32ED148qzgiZP4O/12e+LHE9Jt2khLVO8BjOVwDQqwhwp6zdm
cpGN0SbCgcdd/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:10 2026 by rpki-client